Description
Pillow is a Python imaging library. In versions 11.2.0 to before 11.3.0, there is a heap buffer overflow when writing a sufficiently large (>64k encoded with default settings) image in the DDS format due to writing into a buffer without checking for available space. This only affects users who save untrusted data as a compressed DDS image. This issue has been patched in version 11.3.0.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| python-pillow | Pillow | >= 11.2.0, < 11.3.0 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | python-Pillow | 11.3.0-1.1 | openSUSE-SU-2025:15316-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | py3-pillow | 11.3.0-r0 | — |
| Alpine v3.23 | py3-pillow | 11.3.0-r0 | — |
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | kubeflow-pipelines-visualization-server | 2.5.0-r4 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | pillow | >= 11.2.0, < 11.3.0 | 11.3.0 | GHSA-xg8h-j46f-w952 |
Advisories 1
- openSUSE-SU-2025:15316-1 python311-Pillow-11.3.0-1.1 on GA media SUSE / openSUSE Security Updates · Mar 23, 2026